Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/53b108d9-b742-38eb-82a9-bf6472dee7c2.roa
File: 53b108d9-b742-38eb-82a9-bf6472dee7c2.roa (raw, json)
Hash identifier: hDdwqgSrtHQqPQwJ5fiZ6cl+KNYrj6Iu/go3tsC+ruM=
Subject key identifier: F2:5F:04:06:72:B0:64:3D:69:27:89:AA:53:E1:E1:52:38:37:2B:F3
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F4328583EF56CC6428FCA9A3857B32580
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/53b108d9-b742-38eb-82a9-bf6472dee7c2.roa
Signing time: Wed 26 Aug 2020 17:55:28 +0000
ROA not before: Wed 26 Aug 2020 17:55:28 +0000
ROA not after: Thu 21 Nov 2024 05:00:00 +0000
asID: 212715
IP address blocks: 104.165.91.0/24 maxlen: 24
50.118.248.0/24 maxlen: 24
23.27.243.0/24 maxlen: 24
104.165.81.0/24 maxlen: 24
104.165.83.0/24 maxlen: 24
104.165.107.0/24 maxlen: 24
104.165.109.0/24 maxlen: 24
104.165.114.0/24 maxlen: 24
104.165.120.0/24 maxlen: 24
104.165.134.0/24 maxlen: 24
104.253.11.0/24 maxlen: 24
104.253.12.0/24 maxlen: 24
104.253.29.0/24 maxlen: 24
104.253.57.0/24 maxlen: 24
104.253.63.0/24 maxlen: 24
104.253.96.0/24 maxlen: 24
104.253.106.0/24 maxlen: 24
104.253.132.0/24 maxlen: 24
104.253.139.0/24 maxlen: 24
104.253.141.0/24 maxlen: 24
104.253.143.0/24 maxlen: 24
104.253.144.0/24 maxlen: 24
104.253.146.0/24 maxlen: 24
104.253.150.0/24 maxlen: 24
107.164.85.0/24 maxlen: 24
107.164.145.0/24 maxlen: 24
107.164.199.0/24 maxlen: 24
107.164.200.0/24 maxlen: 24
107.165.138.0/24 maxlen: 24
107.165.161.0/24 maxlen: 24
107.165.194.0/24 maxlen: 24
107.186.35.0/24 maxlen: 24
136.0.47.0/24 maxlen: 24
136.0.67.0/24 maxlen: 24
136.0.99.0/24 maxlen: 24
136.0.226.0/24 maxlen: 24
142.111.219.0/24 maxlen: 24
142.252.51.0/24 maxlen: 24
142.252.52.0/24 maxlen: 24
166.88.149.0/24 maxlen: 24
172.120.14.0/24 maxlen: 24
172.252.215.0/24 maxlen: 24
173.245.84.0/24 maxlen: 24
205.164.9.0/24 maxlen: 24
205.164.32.0/24 maxlen: 24
205.164.59.0/24 maxlen: 24
209.73.132.0/24 maxlen: 24
209.73.136.0/24 maxlen: 24
209.73.137.0/24 maxlen: 24
216.172.135.0/24 maxlen: 24
216.172.138.0/24 maxlen: 24
104.165.78.0/24 maxlen: 24
104.165.29.0/24 maxlen: 24
104.165.73.0/24 maxlen: 24
50.118.255.0/24 maxlen: 24
104.164.180.0/24 maxlen: 24
50.117.45.0/24 maxlen: 24
23.27.14.0/24 maxlen: 24
23.27.23.0/24 maxlen: 24
23.27.127.0/24 maxlen: 24
23.27.248.0/24 maxlen: 24
23.230.29.0/24 maxlen: 24
23.230.67.0/24 maxlen: 24
50.117.96.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:f5:6c:c6:42:8f:ca:9a:38:57:b3:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Aug 26 17:55:28 2020 GMT
Not After : Nov 21 05:00:00 2024 GMT
Subject: CN=409681d9-eccb-4cf8-847d-1e5aef400a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a1:c1:af:bf:5e:92:24:62:8c:91:39:c2:c7:
d4:a8:52:d5:d6:e8:8b:d1:6a:98:fe:a4:86:b6:8f:
1b:03:a3:b4:e8:74:c6:c9:bb:d5:67:b6:3b:e7:0c:
72:2a:f3:de:12:9d:05:00:3d:6c:dd:62:76:d1:48:
13:73:8a:f5:67:34:21:ad:0a:4a:aa:e4:f7:e2:c4:
89:43:e2:f5:0f:e4:90:ec:f3:95:22:9b:7d:0a:15:
2d:91:2a:b8:f1:44:32:61:32:a5:7c:fb:34:f7:c2:
5f:24:4d:0a:b8:a5:a6:76:80:7e:58:d4:9a:d6:c4:
ac:1a:0f:58:9c:ba:6a:0c:44:1d:a7:26:db:b0:61:
65:3f:1d:ac:15:bb:dc:06:ed:39:65:00:84:6a:f5:
67:6c:a3:93:07:28:30:01:10:7f:c7:d1:d6:f4:d2:
d6:a2:a5:53:74:cc:fe:53:ea:8f:7c:38:9b:8d:44:
4b:87:c2:96:61:14:b5:10:0b:59:2c:6e:bd:bb:5e:
2b:96:d9:f5:5c:4a:53:d6:b2:cb:ed:b1:a7:75:05:
b9:98:27:70:4a:63:48:b4:f9:97:d7:6b:00:3e:e5:
d0:cf:f7:53:3b:6f:22:33:c5:10:4d:be:50:ec:54:
27:7e:76:6b:1f:ab:bf:c1:fc:55:7e:90:03:c4:7e:
09:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5F:04:06:72:B0:64:3D:69:27:89:AA:53:E1:E1:52:38:37:2B:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/53b108d9-b742-38eb-82a9-bf6472dee7c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.27.14.0/24
23.27.23.0/24
23.27.127.0/24
23.27.243.0/24
23.27.248.0/24
23.230.29.0/24
23.230.67.0/24
50.117.45.0/24
50.117.96.0/24
50.118.248.0/24
50.118.255.0/24
104.164.180.0/24
104.165.29.0/24
104.165.73.0/24
104.165.78.0/24
104.165.81.0/24
104.165.83.0/24
104.165.91.0/24
104.165.107.0/24
104.165.109.0/24
104.165.114.0/24
104.165.120.0/24
104.165.134.0/24
104.253.11.0-104.253.12.255
104.253.29.0/24
104.253.57.0/24
104.253.63.0/24
104.253.96.0/24
104.253.106.0/24
104.253.132.0/24
104.253.139.0/24
104.253.141.0/24
104.253.143.0-104.253.144.255
104.253.146.0/24
104.253.150.0/24
107.164.85.0/24
107.164.145.0/24
107.164.199.0-107.164.200.255
107.165.138.0/24
107.165.161.0/24
107.165.194.0/24
107.186.35.0/24
136.0.47.0/24
136.0.67.0/24
136.0.99.0/24
136.0.226.0/24
142.111.219.0/24
142.252.51.0-142.252.52.255
166.88.149.0/24
172.120.14.0/24
172.252.215.0/24
173.245.84.0/24
205.164.9.0/24
205.164.32.0/24
205.164.59.0/24
209.73.132.0/24
209.73.136.0/23
216.172.135.0/24
216.172.138.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:37:9c:f2:ec:3b:d6:15:59:2d:32:1a:48:92:54:22:68:04:
4f:9d:38:48:18:cc:28:c4:cc:b5:60:99:0f:c8:30:5c:84:fa:
9d:24:94:d5:df:b6:88:87:31:77:71:8c:a6:43:0b:7f:3d:6d:
79:39:86:1d:0c:d5:5f:bb:28:a5:21:f0:de:af:2a:8b:5b:52:
05:d1:50:64:23:d8:9f:1c:67:8f:e5:2f:38:61:f4:d8:7a:90:
ad:d8:85:44:d1:56:16:19:bd:3e:4e:7c:e5:85:ac:34:13:40:
45:2d:93:8a:85:9f:26:6a:da:f6:e9:dc:9b:37:b8:4d:c5:4f:
f3:46:51:1c:de:e1:4f:2d:2a:0b:af:08:40:4b:e5:4d:b4:8c:
82:a5:a9:0f:d9:1b:5c:eb:ab:6a:85:c1:2a:e0:dd:4a:ee:c6:
1f:be:fa:75:8e:bc:49:d5:f3:ee:db:3a:81:f9:61:b9:2d:57:
55:d2:97:d6:54:d6:a2:83:d9:46:eb:8e:9b:71:a5:c1:8a:6b:
19:de:bc:7f:16:b3:5a:2d:8a:e5:ca:60:58:bd:77:fe:94:5d:
65:0d:58:5d:9e:67:8e:0c:be:04:13:24:a3:28:e1:1d:83:89:
90:a6:25:e0:c4:b6:3f:27:be:3a:f6:25:83:ff:5c:0c:49:5b:
d8:a7:dc:8d
-----BEGIN CERTIFICATE-----
MIIHyTCCBrGgAwIBAgIUAQ0Mn0MoWD71bMZCj8qaOFezJYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTIwMDgyNjE3NTUyOFoXDTI0MTEyMTA1MDAwMFowLzEtMCsGA1UEAxMk
NDA5NjgxZDktZWNjYi00Y2Y4LTg0N2QtMWU1YWVmNDAwYTU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqHBr79ekiRijJE5wsfUqFLV1uiL0WqY/qSG
to8bA6O06HTGybvVZ7Y75wxyKvPeEp0FAD1s3WJ20UgTc4r1ZzQhrQpKquT34sSJ
Q+L1D+SQ7POVIpt9ChUtkSq48UQyYTKlfPs098JfJE0KuKWmdoB+WNSa1sSsGg9Y
nLpqDEQdpybbsGFlPx2sFbvcBu05ZQCEavVnbKOTBygwARB/x9HW9NLWoqVTdMz+
U+qPfDibjURLh8KWYRS1EAtZLG69u14rltn1XEpT1rLL7bGndQW5mCdwSmNItPmX
12sAPuXQz/dTO28iM8UQTb5Q7FQnfnZrH6u/wfxVfpADxH4JNwIDAQABo4IE2zCC
BNcwHQYDVR0OBBYEFPJfBAZysGQ9aSeJqlPh4VI4NyvzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNTNiMTA4ZDktYjc0Mi0z
OGViLTgyYTktYmY2NDcyZGVlN2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMIIBowYIKwYBBQUHAQcBAf8EggGSMIIBjjCCAYoEAgABMIIB
ggMEABcbDgMEABcbFwMEABcbfwMEABcb8wMEABcb+AMEABfmHQMEABfmQwMEADJ1
LQMEADJ1YAMEADJ2+AMEADJ2/wMEAGiktAMEAGilHQMEAGilSQMEAGilTgMEAGil
UQMEAGilUwMEAGilWwMEAGilawMEAGilbQMEAGilcgMEAGileAMEAGilhjAMAwQA
aP0LAwQAaP0MAwQAaP0dAwQAaP05AwQAaP0/AwQAaP1gAwQAaP1qAwQAaP2EAwQA
aP2LAwQAaP2NMAwDBABo/Y8DBABo/ZADBABo/ZIDBABo/ZYDBABrpFUDBABrpJEw
DAMEAGukxwMEAGukyAMEAGuligMEAGuloQMEAGulwgMEAGu6IwMEAIgALwMEAIgA
QwMEAIgAYwMEAIgA4gMEAI5v2zAMAwQAjvwzAwQAjvw0AwQApliVAwQArHgOAwQA
rPzXAwQArfVUAwQAzaQJAwQAzaQgAwQAzaQ7AwQA0UmEAwQB0UmIAwQA2KyHAwQA
2KyKMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAFg3nPLsO9YVWS0yGkiSVCJoBE+dOEgYzCjEzLVgmQ/IMFyE
+p0klNXftoiHMXdxjKZDC389bXk5hh0M1V+7KKUh8N6vKotbUgXRUGQj2J8cZ4/l
Lzhh9Nh6kK3YhUTRVhYZvT5OfOWFrDQTQEUtk4qFnyZq2vbp3Js3uE3FT/NGURze
4U8tKguvCEBL5U20jIKlqQ/ZG1zrq2qFwSrg3Uruxh+++nWOvEnV8+7bOoH5Ybkt
V1XSl9ZU1qKD2UbrjptxpcGKaxnevH8Ws1otiuXKYFi9d/6UXWUNWF2eZ44MvgQT
JKMo4R2DiZCmJeDEtj8nvjr2JYP/XAxJW9in3I0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:23 2024 by rpki-client on console-fra.rpki-client.org